Route Origin Authorization

$ rpki-client -vvf rov-measurements.nlnetlabs.net/repo/rov-measurements/0/323030313a6464623a3a2f34382d3438203d3e2030.roa
File:                     323030313a6464623a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier:          H9otqNylRbOnzs8DKYnBSQePNx3IitJ4Gc9Yg82nRyc=
Subject key identifier:   61:AB:D4:8F:61:DC:D9:FC:59:95:2D:80:B7:84:5C:E8:83:68:93:D0
Certificate issuer:       /CN=A91DA6130000/serialNumber=A8ED7B87DB2755716942AF35716AA89A6293E82E
Certificate serial:       3B8512B6B3999D43E52C87B6D0B6471472A7F1F8
Authority key identifier: A8:ED:7B:87:DB:27:55:71:69:42:AF:35:71:6A:A8:9A:62:93:E8:2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qO17h9snVXFpQq81cWqommKT6C4.cer
Subject info access:      rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/0/323030313a6464623a3a2f34382d3438203d3e2030.roa
Signing time:             Mon 09 Jan 2023 14:53:20 +0000
ROA not before:           Mon 09 Jan 2023 14:48:20 +0000
ROA not after:            Mon 08 Jan 2024 14:53:20 +0000
asID:                     0
IP address blocks:        2001:ddb::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:85:12:b6:b3:99:9d:43:e5:2c:87:b6:d0:b6:47:14:72:a7:f1:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA6130000/serialNumber=A8ED7B87DB2755716942AF35716AA89A6293E82E
        Validity
            Not Before: Jan  9 14:48:20 2023 GMT
            Not After : Jan  8 14:53:20 2024 GMT
        Subject: CN=61ABD48F61DCD9FC59952D80B7845CE8836893D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e2:bc:c8:12:c3:5c:6d:6f:64:78:6a:ef:99:
                    8d:86:7a:4b:d4:50:25:23:dc:14:38:28:28:aa:35:
                    bd:ba:4b:4d:f4:96:7b:e9:36:29:28:74:e7:5f:9d:
                    17:23:a1:dd:3f:d9:77:0a:21:0d:dc:f8:59:38:4e:
                    e6:cb:bf:d7:25:5a:b4:9f:50:24:29:a8:e1:39:eb:
                    63:00:47:ec:74:0f:b2:9e:f3:a2:dd:7c:2b:8b:4a:
                    04:e7:5d:66:e9:d1:15:c5:4f:85:04:33:78:cc:42:
                    6f:c2:a9:26:90:2a:88:cd:3d:7d:be:2a:1c:74:c8:
                    85:3f:5e:59:42:05:23:b5:c9:14:c7:1c:0e:9c:01:
                    9d:d1:59:fb:5d:8b:86:2f:68:f0:92:3a:a7:5f:65:
                    b0:93:90:db:5c:07:e0:50:98:21:83:43:7c:66:55:
                    6d:be:d9:da:19:df:a2:a9:f4:2d:70:25:8a:2c:8a:
                    be:2c:46:3b:65:93:52:e5:ca:81:e8:7e:1c:25:30:
                    2f:84:03:b2:ee:6b:a0:da:4e:49:66:4e:73:7f:ac:
                    b3:f6:b8:07:a9:98:6b:3c:38:3e:2a:ba:36:a5:48:
                    b7:ff:c8:b0:ee:87:0f:74:6c:49:c7:cd:34:66:13:
                    66:4f:51:9a:2f:39:8a:5e:1c:13:7d:d4:4f:18:8a:
                    a2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AB:D4:8F:61:DC:D9:FC:59:95:2D:80:B7:84:5C:E8:83:68:93:D0
            X509v3 Authority Key Identifier:
                keyid:A8:ED:7B:87:DB:27:55:71:69:42:AF:35:71:6A:A8:9A:62:93:E8:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/0/A8ED7B87DB2755716942AF35716AA89A6293E82E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qO17h9snVXFpQq81cWqommKT6C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/0/323030313a6464623a3a2f34382d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:ddb::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:1a:f9:23:81:d2:6e:b4:f1:86:5b:71:a8:09:0f:a2:1c:72:
         13:f2:fc:1b:9e:ec:1d:14:0f:29:90:ce:0b:09:7e:ec:04:6f:
         f0:dd:7c:0b:73:9f:eb:c6:df:a7:08:53:2f:48:5e:a6:25:8f:
         05:2a:a1:93:ff:8f:10:6e:4f:e0:99:7b:40:2c:50:35:00:42:
         c3:14:9e:ec:bf:18:bd:b0:b9:b5:f4:1f:d3:bb:fb:ef:a0:fc:
         b2:2c:a6:39:ea:3f:a0:80:c2:49:3d:cc:8b:64:12:72:e2:84:
         f5:18:74:64:8e:dd:1b:bb:bf:5d:62:42:8c:02:93:f9:d2:e4:
         f6:16:5f:54:73:2b:fd:f4:ad:71:84:31:a0:4e:cf:0e:0c:01:
         b0:dc:0f:e0:e4:89:48:e9:fa:1c:9b:0b:c5:07:26:1f:e3:d5:
         b9:a0:2c:37:09:5c:4e:a0:74:b6:94:f7:bc:eb:b2:bd:ce:45:
         60:ea:15:ea:5a:10:f0:f9:5e:5c:e9:3f:8b:f0:85:cc:b8:18:
         8a:b9:60:98:12:f7:be:b5:47:13:35:3b:25:49:b5:8e:c2:5b:
         23:04:52:de:28:f8:fa:a7:95:5a:2f:5a:ab:89:e6:c4:0c:ca:
         95:33:dc:c6:32:49:5e:98:f9:e5:e4:20:03:09:77:78:38:91:
         a7:0e:b2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----